updated the traefik image and crowdsec-bouncer-traefik-plugin for bigger files #1616

New Issue

MrUnknownDE · 2026-04-05T19:37:35+02:00

MrUnknownDE commented

2026-04-05 19:37:35 +02:00

Originally created by @TuncTaylan on 4/11/2025

updated the traefik image to v3.3.5
updated the crowdsec-bouncer-traefik-plugin to v1.4.2
added default crowdsecAppsecBodyLimit value of 10MB for bigger files

Community Contribution License Agreement

By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.

Description

See the issue https://github.com/fosrl/pangolin/issues/436#top
and my latest comment https://github.com/fosrl/pangolin/issues/436#issuecomment-2797924344

With a setup pangolin and crowdsec the traefik process gets oom'ed with bigger file uploads (minio, nextcloud, immich, etc.).
There is an attribute crowdsecAppsecBodyLimit for the crowdsec-bouncer-traefik-plugin, that adjust the body size of the uploaded files, but it was first implemented in the version v1.4.0.

How to test?

Just setup pangolin with crowdsec and use a service like Minio and try to upload some bigger files, like 1GB. It crashes the traefik process with a VM/VPS with 1 CPU core and 1GB memory.
With the adjustment in this PR there is no need to upgrade the memory of the VPSs.

*Originally created by @TuncTaylan on 4/11/2025* updated the traefik image to v3.3.5 updated the crowdsec-bouncer-traefik-plugin to v1.4.2 added default crowdsecAppsecBodyLimit value of 10MB for bigger files ## Community Contribution License Agreement By creating this pull request, I grant the project maintainers an unlimited, perpetual license to use, modify, and redistribute these contributions under any terms they choose, including both the AGPLv3 and the Fossorial Commercial license terms. I represent that I have the right to grant this license for all contributed content. ## Description See the issue https://github.com/fosrl/pangolin/issues/436#top and my latest comment https://github.com/fosrl/pangolin/issues/436#issuecomment-2797924344 With a setup pangolin and crowdsec the traefik process gets oom'ed with bigger file uploads (minio, nextcloud, immich, etc.). There is an attribute `crowdsecAppsecBodyLimit` for the [crowdsec-bouncer-traefik-plugin](https://plugins.traefik.io/plugins/6335346ca4caa9ddeffda116/crowdsec-bouncer-traefik-plugin), that adjust the body size of the uploaded files, but it was first implemented in the version v1.4.0. ## How to test? Just setup pangolin with crowdsec and use a service like Minio and try to upload some bigger files, like 1GB. It crashes the traefik process with a VM/VPS with 1 CPU core and 1GB memory. With the adjustment in this PR there is no need to upgrade the memory of the VPSs.

MrUnknownDE closed this issue

2026-04-05 19:37:35 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1616